Microsoft Windows Server
This CIS Benchmark is the product of a community consensus process and consists of secure configuration guidelines developed for Microsoft Windows Server
CIS Benchmarks are freely available in PDF format for non-commercial use:
Download Latest CIS BenchmarkIncluded in this Benchmark
Free DownloadCIS Benchmark
Safeguard IT systems against cyber threats with these CIS Benchmarks. Click to download a PDF from the list of available versions.
Learn more about CIS BenchmarkRecent versions available for CIS Benchmark:
* Microsoft Windows Server 2012 R2 (1.0.0)
Azure Compute Microsoft Windows Server 2022 (1.0.0)
Azure Compute Microsoft Windows Server 2019 (1.0.0)
Microsoft Windows Server 2025 (1.0.0)
Microsoft Windows Server 2022 (4.0.0)
Microsoft Windows Server 2022 Stand-alone (1.0.0)
Microsoft Windows Server 2022 STIG (2.0.0)
Microsoft Windows Server 2019 (4.0.0)
Microsoft Windows Server 2019 Stand-alone (2.0.0)
Microsoft Windows Server 2019 STIG (3.0.0)
Microsoft Windows Server 2016 (3.0.0)
Microsoft Windows Server 2016 RTM (Release 1607) (1.3.0)
Microsoft Windows Server 2016 STIG (3.0.0)
Microsoft Windows Server 2012 (1.0.0)
Microsoft Windows Server 2012 (non-R2) (3.0.0)
Microsoft Windows Server 2012 R2 (3.0.0)
Microsoft Windows Server 2008 (2.1.0)
Microsoft Windows Server 2008 (non-R2) (3.3.0)
Microsoft Windows Server 2008 R2 (2.0.0)
Microsoft Windows Server 2008 R2 (3.3.0)
Microsoft Windows Server 2003 (3.0.0)
Microsoft Windows Server 2003 (3.1.0)
CIS Securesuite Members OnlyRecent versions available for CIS-CAT Pro:
Azure Compute Microsoft Windows Server 2022 (1.0.0)
Azure Compute Microsoft Windows Server 2019 (1.0.0)
Microsoft Windows Server 2025 (1.0.0)
Microsoft Windows Server 2022 (4.0.0)
Microsoft Windows Server 2022 Stand-alone (1.0.0)
Microsoft Windows Server 2022 STIG (2.0.0)
Microsoft Windows Server 2019 (4.0.0)
Microsoft Windows Server 2019 Stand-alone (2.0.0)
Microsoft Windows Server 2019 STIG (3.0.0)
Microsoft Windows Server 2016 (3.0.0)
Microsoft Windows Server 2016 STIG (3.0.0)
CIS Securesuite Members OnlyBuild Kits
Automate your hardening efforts for Microsoft Windows Server using Group Policy Objects (GPOs) for Microsoft Windows and Bash shell scripts for Unix and Linux environments.
Download CIS Build KitsNot a CIS SecureSuite member yet?
Apply for membershipRecent versions available for CIS Build Kits:
Azure Compute Microsoft Windows Server 2022 (1.0.0)
Azure Compute Microsoft Windows Server 2019 (1.0.0)
Microsoft Windows Server 2025 (1.0.0)
Microsoft Windows Server 2022 (3.0.0)
Microsoft Windows Server 2022 Stand-alone (1.0.0)
Microsoft Windows Server 2022 STIG (2.0.0)
Microsoft Windows Server 2019 (4.0.0)
Microsoft Windows Server 2019 Stand-alone (2.0.0)
Microsoft Windows Server 2019 STIG (3.0.0)
Microsoft Windows Server 2016 (3.0.0)
Microsoft Windows Server 2016 RTM (Release 1607) (1.3.0)
Microsoft Windows Server 2016 STIG (3.0.0)
Microsoft Windows Server 2012 (1.0.0)
Microsoft Windows Server 2012 (non-R2) (3.0.0)
Microsoft Windows Server 2012 R2 (3.0.0)
Microsoft Windows Server 2008 (non-R2) (3.3.0)
Microsoft Windows Server 2008 R2 (2.0.0)
Microsoft Windows Server 2008 R2 (3.3.0)
Available on all major cloud service provider marketplacesCIS Hardened Images
Virtual machine (VM) images that are pre-configured to meet the robust security recommendations of the associated CIS Microsoft Windows Server Benchmark.
Available CIS Hardened ImagesRecent versions available for CIS Hardened Images:
Microsoft Windows Server 2025
Microsoft Windows Server 2022
Microsoft Windows Server 2022 STIG
Microsoft Windows Server 2019
Microsoft Windows Server 2019 STIG
Microsoft Windows Server 2016
Microsoft Windows Server 2016 STIG
Looking for an older version?
Older versions of the CIS Benchmarks that are no longer supported by CIS and the CIS Benchmarks Community are not lised above. Access a list of archived CIS Benchmarks in Workbench.
Explore CIS Benchmarks Resources
CIS Benchmarks Community
Collaborate with SMEs, implementers, and other cybersecurity practitioners from around the world to help secure Microsoft Windows Server
Join A CommunityEffective Implementation of the CIS Benchmarks
Learn how CIS SecureSuite tools and resources help automate the assessment and implementation of CIS Benchmarks to meet security best practices.
Register For A Webinar Today
